[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"post-spf-dkim-dmarc-krok-po-kroku-en":3},{"cover_image":4,"excerpt":5,"id":6,"pinned":7,"published_at":8,"severity":9,"slug":10,"tags":11,"title":15,"updated_at":8,"body":16},"","Three DNS records decide whether Gmail and Outlook trust your domain. Here is what each one does and how to set them correctly.",2,false,"2026-08-26T19:45:32Z","info","spf-dkim-dmarc-krok-po-kroku",[12,13,14],"dns","hosting","poczta","SPF, DKIM and DMARC step by step – keeping your mail out of the spam folder","Since 2024 Gmail and Yahoo require senders to authenticate their domain. Without correct SPF, DKIM and DMARC records, mail from your domain may land in spam or not arrive at all. The good news: it is three DNS records, set once.\n\n## SPF – who may send on behalf of the domain\n\nSPF (Sender Policy Framework) is a TXT record listing the servers allowed to send mail from `@yourdomain.com` addresses. Example:\n\n```\nyourdomain.com.  IN TXT  \"v=spf1 include:_spf.hosteam.pl -all\"\n```\n\n- `include:` points at your hosting provider's mail servers,\n- `-all` tells the receiver to reject anything outside that list.\n\nThe most common mistake is publishing several SPF records – a domain may have only one. If you also use an external newsletter tool, add its `include:` to the same record.\n\n## DKIM – a cryptographic signature on every message\n\nDKIM (DomainKeys Identified Mail) adds a signature to each message that the receiver verifies against a public key published in DNS. It proves the message was not altered in transit and that the sender controls the domain.\n\nIn the Hosteam panel DKIM is one click in the mail domain settings – the panel generates the key and adds the `default._domainkey` record when the zone is hosted with us. If your DNS lives elsewhere, copy the shown TXT record into your zone.\n\n## DMARC – what to do when things do not add up\n\nDMARC ties the two together and tells receivers how to treat messages that fail verification, and where to send reports:\n\n```\n_dmarc.yourdomain.com.  IN TXT  \"v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com\"\n```\n\nStart with `p=none` (reports only), review the reports after a week, then move to `quarantine` and eventually `reject`.\n\n## How to check it works\n\n1. Send a message to your own Gmail account.\n2. Open \"Show original\" – the header shows `SPF: PASS`, `DKIM: PASS`, `DMARC: PASS`.\n3. The *Mail → Domain* tab in the Hosteam panel shows the status of all three records and warns when one disappears.\n\nIf any of them shows FAIL, it is usually a typo or a second SPF record. Write to us – we will check the zone with you."]